oss-sec mailing list archives

Grails Console is still vulnerable to CSRF CVE-2016-6521

From: Dario Bertini <berdario () gmail com>
Date: Wed, 3 Aug 2016 22:28:50 +0100

In a previous email I announced that the issue was fixed in versions
1.5.10, 2.0.7

I was wrong

https://github.com/sheehan/grails-console/issues/55

Hopefully this vuln will be closed for good soon

Current thread:

CVE Request: CSRF in Grails console Dario Bertini (Aug 01)
- Re: CVE Request: CSRF in Grails console cve-assign (Aug 02)
  - Re: CVE Request: CSRF in Grails console Dario Bertini (Aug 02)
- Grails Console is still vulnerable to CSRF CVE-2016-6521 Dario Bertini (Aug 03)